Image forming apparatus, method of controlling the same, and storage  medium

ABSTRACT

An image forming apparatus and a method of controlling the same, wherein stored user information is referenced to perform authentication of a user based on accepted user information, and the user is allowed to confirm whether or not to reset the user information of the user when authentication of the user fails. The user is caused to select a reset method for resetting the user information of the user in accordance with the confirmation, and reset the stored user information of the user in accordance with the selected reset method.

BACKGROUND OF THE INVENTION Field of the Invention

The present invention relates to an image forming apparatus, a method ofcontrolling the same, and a storage medium.

Description of the Related Art

An MFP (Multifunction Peripheral) provided with a scanner, a printerengine, and a communication function and having an application that canexecute, for example, copying, printing, and transmission of image dataobtained by scanning an original is known. Because such an MFP is usedby a plurality of users, there are MFPs that are provided with a userauthentication function in order to restrict, for each userauthenticated by an MFP, functions of the MFP that a user can use.

For example, Japanese Patent Laid-Open No. 2012-254618 discloses animage forming apparatus provided with a login function for allowing auser selected from a screen for selecting a user to log in to the imageforming apparatus. Japanese Patent Laid-Open No. 2012-254618 recites, asa user management method that does not depend on an administrator, amethod for using job owner information (user information) added to aprint job received from a PC to automatically register the user to theimage forming apparatus.

For example, in a case where a password is used in user authenticationin an image forming apparatus, when a user forgets the password, theuser ceases to be able to log in to and use the image forming apparatus.In such a case, the user needs to contact an administrator and have theadministrator reset the user's password. However, when a correctpassword is unable to be input or reset of the password cannot beperformed due to a reason such as an administrator being uncontactable,time that the user is unable to user the image forming apparatuslengthens.

SUMMARY OF THE INVENTION

An aspect of the present invention is to eliminate the above-mentionedproblem with conventional technology.

A feature of the present invention is to provide a technique that allowsuser information necessary for authentication to be reset without theintervention of an administrator, even in the case where a user cannotobtain the user information which is necessary for authentication.

According to a first aspect of the present invention, there is providedan image forming apparatus, comprising: a storage that stores userinformation; a memory device that stores a set of instructions; and atleast one processor that executes the instructions stored in the memorydevice to: perform an authentication of a user based on accepted userinformation, with reference to the user information stored in thestorage; allow a user to confirm whether or not to reset the userinformation of the user in a case where the authentication of the userfails; allow the user to select a reset method for resetting the userinformation of the user in accordance with confirmation by the user; andreset the user information, stored in the storage, of the user inaccordance with the selected reset method.

According to a second aspect of the present invention, there is provideda method of controlling an image forming apparatus having a storageoperable to store user information, the method comprising: performing anauthentication of a user based on accepted user information, withreference to the user information stored in the storage; allowing a userto confirm whether or not to reset the user information of the user in acase where the authentication of the user fails; allowing the user toselect a reset method for resetting the user information of the user inaccordance with the confirmation; and resetting user information of theuser stored in the storage in accordance with the selected reset method.

Further features of the present invention will become apparent from thefollowing description of exemplary embodiments with reference to theattached drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

The accompanying drawings, which are incorporated in and constitute apart of the specification, illustrate embodiments of the invention and,together with the description, serve to explain the principles of theinvention.

FIG. 1 depicts a view for describing an overall configuration of asystem according to an embodiment of the present invention.

FIG. 2 is a block diagram for describing a hardware configuration of anMFP according to the embodiment.

FIG. 3 is a functional block diagram for describing a softwareconfiguration of an MFP according to the embodiment.

FIG. 4 depicts a view for describing an example of a table for storinguser information that is managed by a user authentication module of theMFP according to the embodiment.

FIG. 5 depicts a view for describing an overview of processing forregistering user information from a print job inputted from a PCaccording to the embodiment.

FIG. 6 is a flowchart for describing a flow of processing, when a userhas failed at authentication, for resetting a secret number for theuser, in the MFP according to the embodiment.

FIGS. 7A through 7D depict views illustrating examples of screensdisplayed on a display unit of a console unit of the MFP according tothe embodiment.

FIG. 8 is a flowchart for describing processing for resetting (stepS607) a secret number in the case where “reset in accordance with inputof print job” is selected as a reset method for the secret number, inthe MFP according to the embodiment.

FIG. 9 is a flowchart for describing processing for resetting (stepS607) a secret number in the case where “notify reset secret number byemail” is selected as a reset method for the secret number, in the MFPaccording to the embodiment.

FIG. 10 depicts a view illustrating an example of a setting screen forsetting whether to enable or disable automatic registration of userinformation in accordance with job input.

DESCRIPTION OF THE EMBODIMENTS

Embodiments of the present invention will be described hereinafter indetail, with reference to the accompanying drawings. It is to beunderstood that the following embodiments are not intended to limit theclaims of the present invention, and that not all of the combinations ofthe aspects that are described according to the following embodimentsare necessarily required with respect to the means to solve the problemsaccording to the present invention.

FIG. 1 depicts a view for describing an overall configuration of asystem according to the embodiment of the present invention.

The system has an MFP 101 which is an image forming apparatus, a PC 102,and a mail server 103 that are connected to a LAN 100. Note thatillustration is given only for equipment related to description ofembodiments, but a plurality of PCs, servers, and the like are alsoconnected to the LAN 100. The PC 102 transmits a print job to the MFP101. In addition, the mail server 103 is a server that is necessary fortransmission and reception of email.

FIG. 2 is a block diagram for describing a hardware configuration of theMFP 101 according to the embodiment. Description is given regarding anexample of the MFP 101 in the present embodiment, but the MFP 101 may bean image forming apparatus such as an SFP (Single Function Peripheral)that has a single function such as a copy function or a scanningfunction.

A CPU 201 of a control unit 200 controls operation of the MFP 101 as awhole. The CPU 201 executes a boot program stored in a ROM 202, anddeploys a program stored in an HDD 204 into a RAM 203. The RAM 203 isused as a temporary storage unit such as a main memory or a work areafor the CPU 201. The HDD (hard disk drive) 204 stores received printjobs, image data, and various kinds of programs. A console unitinterface 205 connects the control unit 200 with a console unit 209. Theconsole unit 209 has a display unit which has a touch panel function,and a key unit that has a plurality of physical keys. A printer I/F 206connects a printer unit 210 and the control unit 200. Image data to beprinted by the printer unit 210 is transferred to the printer unit 210from the control unit 200 via the printer I/F 206, and is printed on arecording material (sheet) by the printer unit 210. A scanner I/F 207connects a scanner 211 and the control unit 200. The scanner 211generates image data by reading an image of an original, and suppliesthe image data to the control unit 200 via the scanner I/F 207. Anetwork I/F 208 connects the control unit 200 (MFP 101) to the LAN 100.The network I/F 208 transmits and receives various pieces of informationto and from an external apparatus on the LAN 100 (for example, receivesa print job transmitted from the PC 102).

FIG. 3 is a functional block diagram for describing a softwareconfiguration of the MFP 101 according to the embodiment. Functionsillustrated in FIG. 3 are, as described above, realized by the CPU 201executing programs deployed in the RAM 203.

A screen display management module 301 performs display control withrespect to a display unit of the console unit 209. A network module 324performs control for communicating, via the LAN 100, with the PC 102,the mail server 103, or the like. A user authentication module 310realizes a user authentication function necessary for personalization,access control, and the like for a user who uses the MFP 101. As aconsequence, it is provided with a user management module 311, anauthentication module 312, and a resetting module 313. The usermanagement module 311 manages user information.

The user authentication module 310 performs determination processing fordetermining whether or not a user who made a login request has authorityfor login to the MFP 101. However, configuration may be taken such thatan external apparatus such as an authentication server obtainsidentification information from the MFP 101 and performs thedetermination processing, and the MFP 101 obtains a determination resultfrom the external apparatus. In this embodiment, description is givenregarding an example where the MFP 101 has a plurality of methods(functions) for identifying a user who is logging in. However,configuration may be taken such that the MFP 101 provides only a loginmethod in accordance with a second method that is described later.

A first method is a method where the MFP 101 identifies a user who islogging in by the user causing an IC card reader/writer (not shown) toread information stored in an IC card of the user who is logging in.

The second method is a method where the MFP 101 identifies a user who islogging in by the user selecting the user who is logging in from a userselection screen displayed on the display unit. FIG. 7A illustrates anexample of the user selection screen. Each icon illustrated in FIG. 7Acorresponds to a user who is registered in the MFP 101. A user can makea login instruction to the MFP 101 by specifying an icon correspondingto themself. By the second method, a user can log in to the MFP 101without using an IC card. Accordingly, with the second method, a usercan log in to the MFP 101 in an easier fashion than with the firstmethod.

A third method is a method for the MFP 101 to identify a user who islogging in by the MFP 101 obtaining identification information inputtedby a user to a login screen that is displayed on the display unit of theMFP 101. In a case of inputting authentication information via thedisplay unit of the MFP 101, a user can input identification informationby operating the console unit 209.

The user authentication module 310 manages a list of pieces ofidentification information that correspond to users who can use the MFP101, and determines whether to permit the login of a user based on atleast whether or not information obtained in accordance with one of themethods described above is included in the list. Details of the list aredescribed later with reference to FIG. 4.

Note that, in this embodiment, it is possible to set the MFP 101 sothat, for a user to log into the MFP 101, the MFP 101 requests input ofauthentication information such as a password or a secret numberassociated with identification information of the user, and not only theidentification information of the user.

In addition, in this embodiment, description was given for an examplewhere a user operates the MFP 101 to execute login processing, butconfiguration may be taken such that a user operates a terminal deviceconnected via a network to the MFP 101 to execute login processing. Forexample, configuration may be taken such that an input screen foridentification information of the user is displayed on the terminaldevice, and the user logs in to the MFP 101 by inputting theiridentification information into the input screen displayed on theterminal device. In addition, configuration may also be taken such thata user logs in to the MFP 101 by causing an IC card reader connected tothe terminal device to read card information of an IC card. In addition,configuration may be taken such that the user selection screen describedabove is displayed on the terminal device, and a user logs into the MFP101 by making a selection in the terminal device.

Configuration may be taken so as to enable a function for both login bythe first method and login by the second method, and enable a user toselect which login method to use. In other words, it is possible toperform login processing by the first method when an IC card is touchedto a card reader, and perform login processing by the second method whena user selection operation with respect to a user selection screendisplayed on a display unit is made. Configuration may be taken so asperform authentication by an external authentication server inaccordance with the first method described above even when bothfunctions are enabled in this fashion, and perform login processingbased on an authentication result from the authentication server.

FIG. 4 depicts a view for describing an example of a table for storinguser information that is managed by the user authentication module 310of the MFP 101 according to the embodiment.

A “uid” 401 is a user name for identifying a user. In the case of adomain environment, the user is identified by the “uid” 401 and a“domain” 402. In the case of a work group environment, a user isuniquely identified by combining the “uid” 401 and a “PC name” 403. A“secret number” 404 and a “password” 405 are both character strings thatonly the user knows that are necessary for authentication of the user.Here, the “secret number” 404 is used when the user uses the MFP 101 viathe console unit 209, and the “password” 405 is used when the user usesthe MFP 101 via a network. Below, the “secret number” and the “password”are collectively referred to as authentication information.

In this embodiment, authentication information such as a secret numberand a password are set by a user via the console unit 209. In addition,setting of authentication information can be performed from aninformation processing apparatus such as the PC 102 which is connectedto the MFP 101 via a network. In this fashion, the MFP 101 acceptsregistration of the authentication information from the PC 102 or viathe console unit 209. An “e-mail” 406 is an email address that the useruses for usual work. A “registration method” 407 is for registeringwhether to perform registration of user information manually orautomatically. Here, “auto” means that user information (for example,user name, domain name, and computer name), which is added to a printjob received from a host computer and is for the user who is the ownerof the print job, is obtained, for example. The MFP 101 thenautomatically sets the items 401 through 403 described above, based onthe user information. In this fashion, user identification information(for example, uid 401 and the like) for the MFP 101 is generated basedon the user identification information (for example, user name, and thelike) included in the received job. As illustrated by FIG. 4, thegenerated user identification information is stored in the HDD 204 isassociated with authentication information accepted after the generationof the user identification information.

The authentication module 312 performs control for authenticating a userbased on the authentication information and the user identificationinformation stored in the HDD 204. When authentication succeeds, loginprocessing is performed, and a predetermined operation screen for a userto use an application such as copy 321, print 322, and “scan and send”323 is displayed on the display unit of the console unit 209. Theauthentication module 312 provides a UI (User Interface) for userauthentication that uses authentication by the second method describedabove. A user operation via the UI is accepted, and a comparison isperformed with the user information managed by the user managementmodule 311. The UI is provided for each access path, such as onedisplayed on the console unit 209, and one that is operated by a Webbrowser after being accessed via a network. The resetting module 313performs control relating to resetting the secret number and thepassword of a user which are managed by the user management module 311.

The copy 321, the print 322, and the “scan and send” 323 are examples ofapplications that operate on the MFP 101. The copy 321 is for performingso-called copying. The print 322 is an application for holding a printjob inputted from the PC 102, displaying a list of jobs inputted by auser who has logged in, and printing after confirming details of theuser. The “scan and send” 323 transmits image data, which is obtained bythe scanner 211 scanning, externally, such as by email, for example.

Here, as methods for registering and editing user information, the userauthentication module 310 provides automatic registration that uses userinformation included in a print job received from a PC or the like, inaddition to typical methods such as input from a UI or import of userinformation.

FIG. 5 depicts a view for describing an overview of processing forregistering user information from a print job inputted from the PC 102according to the embodiment.

A print job inputted here includes user information (user name, domainname, PC name). The user management module 311 that receives a print jobconveys the user information to the authentication module 312 before thehold printing processing. The authentication module 312 extracts theuid, domain, PC name, and the like from the user information andregisters them to the table (FIG. 4) described above.

FIG. 6 is a flowchart for describing a flow of processing, when a userhas failed at authentication, for resetting a secret number for theuser, in the MFP 101 according to the embodiment. Note that theprocessing described in this flowchart is achieved by the CPU 201executing a program that has been deployed to the RAM 203.

Firstly, in step S601, the CPU 201 displays on the display unit of theconsole unit 209 a screen for allowing selection of a user, for examplethe screen illustrated on FIG. 7A, who is managed by the user managementmodule 311.

FIG. 7A depicts a view illustrating an example of a user selectionscreen for allowing a user to select a user.

In the MFP 101 according to the embodiment, icons corresponding to eachuser, as in FIG. 7A for example, are caused to be displayed on thedisplay unit of the console unit 209, and when a user presses their ownicon, an operation screen (a screen for after login) that is customizedfor the user is displayed. This function is referred to as a simplelogin function below. Information to be displayed is not limited toicons, and a display format does not matter if there is information forselecting a user. With the simple login function, there is a functionfor automatically registering a logged-in user. This automaticregistration function is a function for automatically registering, as auser of the simple login function, a user corresponding to a user IDincluded in a job, when the job is inputted to the MFP 101 from the PC102, for example. When a user is newly registered in this way, an iconfor the newly registered user is displayed in the list of user icons forthe simple login function.

Here, buttons for the user names of “Tanaka”, “Kikuchi”, and “Suzuki”are displayed, and a user selects the button for their own name fromthese.

In step S601, when the user name is selected, the processing proceeds tostep S602 and the CPU 201 displays a screen as illustrated in FIG. 7B,for example, on the display unit of the console unit 209.

FIG. 7B depict a view illustrating an example of a screen for a user toinput a secret number.

Here, the user inputs a secret number in a secret number input field701, and presses a login button 702. By this, the CPU 201 executesauthentication processing for the user based on the inputted secretnumber.

The processing proceeds to step S603, and the CPU 201 determines whetheror not this is a secret number that corresponds to the user, in otherwords whether or not the secret number is correct. Upon determining thatthe secret number is correct, the processing proceeds to step S608,login for the user is permitted, and processing is performed thereafterwith the user in a logged-in state. Description of an overview of thisprocessing is omitted here.

Meanwhile, when the CPU 201 determines in step S603 that the secretnumber inputted in the screen of FIG. 7B is not a secret number thatcorresponds to the user, the processing proceeds to step S604. In stepS604, the CPU 201 displays a screen as illustrated by FIG. 7C, forexample.

FIG. 7C depicts a view illustrating an example of a screen, displayedwhen authentication of the user fails, for confirming with the userwhether or not to perform a reset of the secret number. A reset of thesecret number includes deleting the secret number stored in associationwith the uid 401 of the user who failed at authentication, and settingthe uid 401 to a state where a secret number is not associated. A newsecret number can be set by the user performing manual input afterdeletion of the old secret number. Alternatively, configuration may betaken to delete the secret number stored in association with the uid 401of the user who failed at authentication, and automatically setting anew secret number. By instructing a reset of the secret number in thisfashion, the user can disable the secret number that they are currentlyusing.

Here, a message that the secret number that the user inputted wasincorrect is displayed, and the user is allowed to select whether or notto reset the secret number. When the user presses a “YES” button 703here, the processing proceeds from step S605 to step S606, and when theypress a “NO” button 704, the processing returns to step S601 from stepS605. In step S606, the CPU 201 displays on the display unit of theconsole unit 209 a screen for allowing the user to select a reset methodfor the secret number as illustrated in FIG. 7D, for example.

FIG. 7D depicts a view illustrating an example of a screen for allowingthe user to select the reset method for the secret number in step S606.

The screen of FIG. 7D includes a radio button 705 for making aninstruction to reset the secret number of the user based on the userinformation added to a new print job, in accordance with inputting theprint job from the PC 102. Furthermore, the screen includes a radiobutton 706 for making an instruction to notify the reset secret numberby email. The user can specify the reset method for the secret number bymarking a check in either radio button 705 or 706 and pressing an OKbutton 707. Note that detail of the processing for resetting the secretnumber is described later with reference to the flowcharts of FIG. 8 andFIG. 9.

Note that, in the case that the user is “Tanaka” for example,registration is made in the registration method 407 of FIG. 4 so thatregistration of user information is performed manually. Accordingly, theradio button 705 and items for selecting reset of the secret number inaccordance with input of a print job are not displayed. In other words,reset of the secret number by input of a job cannot be performed.

In addition, in the case of a user for who an email address is notregistered in the user information of FIG. 4, the radio button 706 anditems for making an instruction so as to notify a reset secret number byemail are not displayed because transmission of an email cannot beachieved.

When a method for resetting the secret number is selected in step S606in this way, the processing proceeds to step S607, and the CPU 201resets the secret number of the user in accordance with the methodselected in step S606.

FIG. 8 is a flowchart for describing processing for resetting (stepS607) a secret number in the case where “reset in accordance with inputof print job” is selected as a reset method for the secret number, inthe MFP 101 according to the embodiment. Note that the processingdescribed in this flowchart is achieved by the CPU 201 executing aprogram that has been deployed to the RAM 203.

Firstly, in step S801, the CPU 201 adds the user who made an instructionfor a reset to a “reset waiting user list”. The “reset waiting userlist” lists user information for which an instruction for reset of thesecret number was performed but reset has not yet completed in practice,and this data is stored in the RAM 203. Next the processing proceeds tostep S802, and the CPU 201 waits for receipt of a print job from anexternal device, for example the PC 102. Upon receiving a print job, theprocessing proceeds to step S803, and the CPU 201 receives the print joband stores it in the RAM 203. Next the processing proceeds to step S804,and the CPU 201 determines whether or not a user of the received printjob is a user who is in the “reset waiting user list”. Here, when theuser of the received print job is not a user in the reset waiting userlist, the processing proceeds to step S808, the received print job ispromptly printed, or stored in the HDD 204 in the case of a holdprinting, and this processing ends.

Meanwhile, when the CPU 201 determines in step S804 that a user of thereceived print job is a user who is in the “reset waiting user list”,the processing proceeds to step S805. In step S805, the CPU 201 extractsa secret number included in user information included in the receivedprint job, and resets the extracted secret number as the secret numberfor the user so that the “secret number” 404 corresponding to the useris reset to the extracted secret number. Next, the processing proceedsto step S806, and the CPU 201 deletes user information of the user fromthe “reset waiting user list”. The processing proceeds to step S807, andthe CPU 201 deletes from the RAM 203 the print job necessary for resetof the secret number that was received in step S803, and this processingends.

In the case where authentication of the user failed, when reset of theauthentication information is instructed and a job including useridentification information of the user who failed at authentication isreceived, control for disabling the authentication information stored inassociation with the user identification information of the user andresetting the authentication information of the user with authenticationinformation included in the received job is performed. In this fashion,it is possible to reset the secret number of the user based on the userinformation included in the received job.

FIG. 9 is a flowchart for describing processing for resetting (stepS607) a secret number in the case where “notify reset secret number byemail” is selected as a reset method for the secret number, in the MFP101 according to the embodiment. Note that the processing described inthis flowchart is achieved by the CPU 201 executing a program that hasbeen deployed to the RAM 203.

Firstly, in step S901 the CPU 201 generates a random value as a newsecret number. Next, the processing proceeds to step S902 and the CPU201 sets the new secret number as the secret number of the user that ismanaged by the user management module 311 (refer to FIG. 4). Next theprocessing proceeds to step S903, and the CPU 201 transmits the secretnumber that was newly set to the “e-mail” address of the user which ismanaged by the user management module 311.

Consequently, by a newly generated secret number for a user beingnotified to the user by the MFP 101, the user can use the newlygenerated secret number to log in to the MFP 101.

In the screen for selecting a reset method for the secret numberexemplified in FIG. 7D, “reset of secret number by input of print job”and “notify reset secret number by email” are options. However, becausethere are cases where a reset function cannot be executed due to thesituation, configuration is taken so that a method that cannot beexecuted is not displayed as an option. Examples of non-display follow.

(1) Reset in Accordance with Print Job Input

If the “registration method” 407 for the user information of the user isnot “auto”, in other words is “manual”, “reset in accordance with inputof print job” is not displayed.

Because the case of automatic registration and “reset in accordance withinput of print job” both use user information included in a print job,they always match. However, when the registration method 407 is“manual”, there is the possibility of no match, and “reset in accordancewith input of print job” is not displayed as an option.

A registration method for user information can be set by anadministrator or a user in a setting screen as illustrated in FIG. 10.Configuration may be taken to open the setting screen of FIG. 10 only inthe case where an administrator is logged in. In the example of FIG. 10,the “registration method” for user information is set to “auto” byinputting a check into a check box 1001 for “automatically register at atime of job input”. In contrast, the “registration method” for userinformation is set to “manual” when a check is not entered in the checkbox 1001 for “automatically register at a time of job input”. In thisfashion, the MFP 101 can perform a first setting and a second settingbased on a user setting via the setting screen illustrated in FIG. 10.The first setting is for setting whether or not to enable a function forgenerating the user identification information of the MFP 101 inresponse to receiving a job. The second setting is for setting, inaccordance with reception of a job that includes the identificationinformation of a user who failed at authentication, whether or not toenable a function for disabling authentication information associatedwith user identification information of the user who failed atauthentication.

Note that configuration may be taken such that it is possible to setwhether or not to enable “reset in accordance with input of print job”in the setting screen. Furthermore, restriction may be performed so thata setting of “reset in accordance with input of print job” cannot beperformed, in accordance with the setting of the “registration method”for user information. For example, configuration may be taken such that,in the setting screen illustrated in FIG. 10, if “automatically registerat a time of job input” is not enabled, it is not possible to enable theitem for “reset secret number in accordance with job input”. The casewhere “automatically register at a time of job input” is not enabled isthe case where the registration method for user information is “manual”.In the example of FIG. 10, by graying out a check box 1002 for “permitreset of secret number in accordance with job input”, it is possible toset so that the function cannot be enabled. Here, the “permit reset ofsecret number in accordance with job input” of FIG. 10 means performingthe “automatically register at a time of job input” described above. Inthis fashion, the CPU 201 of the MFP 101 performs control so that thesecond setting cannot be enabled if the first setting is not enabled.

(2) Notification of Reset Secret Number by Email

When the MFP 101 is not provided with a transmission function, “notifyreset secret number by email” is removed from the options because it isnot possible to make a notification by email.

In addition, in a case where setting of necessary for transmission ofthe email such as mail server information is not performed, “notifyreset secret number by email” is also removed from the options becauseit is not possible to make a notification by email.

In a case where the email address “e-mail” is not set in the userinformation managed by the user management module 311, “notify resetsecret number by email” is removed from the options because it is notpossible to make a notification by email.

In the login screen after the secret number is reset, there is apossibility that another person will mistakenly perform an operation toreset the secret number. Accordingly, configuration may be taken suchthat, when the user whose secret number was reset next logs in, amessage that the secret number of the user was reset is displayed on aninput screen for the secret number exemplified by FIG. 7B.

By this, a user can input the secret number to login after confirmingthat their own secret number was reset.

Note that description was given in the examples described above bytaking the secret number of a user as an example, but there is nolimitation to a secret number, and this may be user information uniqueto a user such as a password, for example.

Other Embodiments

Embodiments of the present invention can also be realized by a computerof a system or apparatus that reads out and executes computer executableinstructions (e.g., one or more programs) recorded on a storage medium(which may also be referred to more fully as a ‘non-transitorycomputer-readable storage medium’) to perform the functions of one ormore of the above-described embodiments and/or that includes one or morecircuits (e.g., application specific integrated circuit (ASIC)) forperforming the functions of one or more of the above-describedembodiments, and by a method performed by the computer of the system orapparatus by, for example, reading out and executing the computerexecutable instructions from the storage medium to perform the functionsof one or more of the above-described embodiments and/or controlling theone or more circuits to perform the functions of one or more of theabove-described embodiments. The computer may comprise one or moreprocessors (e.g., central processing unit (CPU), micro processing unit(MPU)) and may include a network of separate computers or separateprocessors to read out and execute the computer executable instructions.The computer executable instructions may be provided to the computer,for example, from a network or the storage medium. The storage mediummay include, for example, one or more of a hard disk, a random-accessmemory (RAM), a read only memory (ROM), a storage of distributedcomputing systems, an optical disk (such as a compact disc (CD), digitalversatile disc (DVD), or Blu-ray Disc (BD)™), a flash memory device, amemory card, and the like.

While the present invention has been described with reference toexemplary embodiments, it is to be understood that the invention is notlimited to the disclosed exemplary embodiments. The scope of thefollowing claims is to be accorded the broadest interpretation so as toencompass all such modifications and equivalent structures andfunctions.

This application claims the benefit of Japanese Patent Application No.2017-130522, filed Jul. 3, 2017, which is hereby incorporated byreference herein in its entirety.

What is claimed is:
 1. An image forming apparatus, comprising: a storagethat stores user information; a memory device that stores a set ofinstructions; and at least one processor that executes the instructionsstored in the memory device to: perform an authentication of a userbased on accepted user information, with reference to the userinformation stored in the storage; allow a user to confirm whether ornot to reset the user information of the user in a case where theauthentication of the user fails; allow the user to select a resetmethod for resetting the user information of the user in accordance withconfirmation by the user; and reset the user information, stored in thestorage, of the user in accordance with the selected reset method. 2.The image forming apparatus according to claim 1, wherein the resetmethod includes a first method for resetting user information of a userusing user information included in a received job.
 3. The image formingapparatus according to claim 2, wherein the first method is able to beselected in a case that the image forming apparatus is set to hold allreceived print jobs and registration of user information of a user isset to use user information included in a received print job.
 4. Theimage forming apparatus according to claim 2, wherein the at least oneprocessor executes the instructions in the memory device further to: ina case that the first method is selected, receive a job from an externaldevice; determine whether or not user identification information of thereceived job corresponds to user identification information of the userfor which the reset is to be performed; and if the user identificationinformation of the received job is determined to correspond to the useridentification information of the user for which the reset is to beperformed, use user information of the received job to reset the userinformation, stored in the storage, of the user for which a reset is tobe performed.
 5. The image forming apparatus according to claim 4,wherein the at least one processor executes the instructions in thememory device further to: in a case that it is determined that the useridentification information of the received job corresponds to the useridentification information of the user for which the reset is to beperformed, and after resetting the user information using the userinformation of the received job, stored in the storage, of the user,delete the received job.
 6. The image forming apparatus according toclaim 1, wherein the reset method includes a second method for resettinguser information of a user by notifying user information generated bythe image forming apparatus to the user.
 7. The image forming apparatusaccording to claim 6, wherein the second method is able to be selectedin a case that the image forming apparatus has a transmission functionand the user information stored in the storage, of the user includes anemail address of the user.
 8. The image forming apparatus according toclaim 6, wherein the at least one processor executes the instructions inthe memory device further to: if the second method is selected, generatenew user information, cause the storage to store the new userinformation as the user information of the user, and transmit the newuser information to the user for whom the reset was performed.
 9. Theimage forming apparatus according to claim 8, wherein the at least oneprocessor executes the instructions in the memory device further to:generate the new user information as a random value.
 10. The imageforming apparatus according to claim 6, wherein the user informationincludes a secret number or a password, and wherein the at least oneprocessor executes the instructions in the memory device further to:display a screen in which the secret number or password is inputted bythe user, and perform authentication of the user based on theinformation inputted via the screen and the user information stored inthe storage.
 11. The image forming apparatus according to claim 10,wherein the at least one processor executes the instructions in thememory device further to: after the reset of the user information of theuser, display on the screen information indicating that the secretnumber or password has been reset.
 12. A method of controlling an imageforming apparatus having a storage operable to store user information,the method comprising: performing an authentication of a user based onaccepted user information, with reference to the user information storedin the storage; allowing a user to confirm whether or not to reset theuser information of the user in a case where the authentication of theuser fails; allowing the user to select a reset method for resetting theuser information of the user in accordance with the confirmation; andresetting user information of the user stored in the storage inaccordance with the selected reset method.
 13. An image formingapparatus, comprising: a memory device that stores a set ofinstructions; and at least one processor that executes the instructionsstored in the memory device to: receive a job; generate useridentification information of the image forming apparatus based on useridentification information included in the received job; acceptauthentication information associated with the user identificationinformation; store the user identification information of the imageforming apparatus and the accepted authentication information inassociation in a storage; perform control for authentication of a userbased on the user identification information and the authenticationinformation stored in the storage; in a case that the authentication ofthe user succeeds, cause a display unit to display a predeterminedoperation screen for the user to operate the image forming apparatus;and in a case where the authentication of the user fails, when reset ofthe authentication information is instructed and a job including useridentification information of the user who failed authentication isreceived, perform control to disable the authentication informationstored in association with the user identification information of theuser who failed authentication.
 14. The image forming apparatusaccording to claim 13, wherein the at least one processor executes theinstruction in the memory device further to: perform a first setting forsetting whether or not to enable a function for generating the useridentification information of the image forming apparatus in response toreceiving the job, perform a second setting for setting, in accordancewith reception of a job that includes identification information of theuser who failed at authentication, whether or not to enable a functionfor disabling authentication information associated with useridentification information of the user who failed at authentication, andin a case that the first setting is not enabled, control to disable toset the second setting.
 15. A method of controlling an image formingapparatus, the method comprising: receiving a job; generating useridentification information of the image forming apparatus based on useridentification information included in the received job; acceptingauthentication information associated with the user identificationinformation; storing the user identification information of the imageforming apparatus and the accepted authentication information inassociation in a storage; performing control for authentication of auser based on the user identification information and the authenticationinformation stored in the storage; in a case that the authentication ofthe user succeeds, causing a display unit to display a predeterminedoperation screen for the user to operate the image forming apparatus;and in a case where the authentication of the user fails, when reset ofthe authentication information is instructed and a job including useridentification information of the user who failed authentication isreceived, disabling the authentication information stored in the storagein association with the user identification information of the user whofailed authentication.
 16. A non-transitory computer-readable storagemedium storing a computer program for causing a computer to executesteps of a method of controlling an image forming apparatus including astorage operable to store user information, the method comprising:performing an authentication of a user based on received userinformation, with reference to the user information stored in thestorage; allowing a user to confirm whether or not to reset the userinformation of the user in a case where the authentication of the userfails; allowing the user to select a reset method for resetting the userinformation of the user in accordance with the confirmation; andresetting user information of the user stored in the storage inaccordance with the selected reset method.
 17. A non-transitorycomputer-readable storage medium storing a computer program for causinga computer to execute steps of a control method for an image formingapparatus, the control method comprising: receiving a job; generatinguser identification information of the image processing apparatus basedon user identification information included in the received job;accepting authentication information associated with the useridentification information; storing the user identification informationof the image forming apparatus and the accepted authenticationinformation in association in a storage; performing control forauthentication of a user based on the user identification informationand the authentication information stored in the storage; in a case thatthe authentication of the user succeeds, causing a display unit todisplay a predetermined operation screen for the user to operate theimage forming apparatus; and in a case where the authentication of theuser fails, when reset of the authentication information is instructedand a job including user identification information of the user whofailed authentication is received, disabling the authenticationinformation stored in the storage in association with the useridentification information of the user who failed authentication.